Ipfcontrol / News: Recent posts

Starting from tomorrow 6 september, IPFC will be hosted on the http://savannah.gnu.org site instead of SourceForge, due to SF's changing focus and commitment to free software. Stay tuned for more information.

* tagged RELEASE_1_0_4
* now using OO for encapsulating ADTs
* moved a lot of functionality to the src/lib/IPFC directory (for reuse)
* Added 2 correlation modules : Simple (full correlation) and WithContext.

This version add the new db format (you can attribute without changing all the db).

* Added initial support for security advisory
* Improved frontend
* New logging format
* Added alerter (basic functionality for now)
* Better polling in db-backend, db-wrapnet and alerter
* Misc. fixes

- Added support for HMAC-SHA1 XML signatures
(all logs, policy and events can be signed. for example you can now sign your syslog logs or your web server logs)
- Added mon wrapper
- general clean-ups and bugfixes

IPFC is a software and framework to manage and monitor multiple
types of security modules across a global network. Security modules can be
as diverse as packet filters (like netfilter, pf, ipfw, IP Filter,
checkpoint FW1...), NIDS (Snort, arpwatch...), webservers and other
general devices (from servers to embedded devices). IPFC was thought out
from the beginning with security in mind. IPFC features log collection for
different security "agents", dynamic log correlation possibilities and
easy extensibility due to the generic database and XML message formats
used.
This release includes bug fixes and support for the new IPFC XML format.

IPFC is a software and framework to manage and monitor multiple
types of security modules across a global network. Security modules can be
as diverse as packet filters (like netfilter, pf, ipfw, IP Filter,
checkpoint FW1...), NIDS (Snort, arpwatch...), webservers and other
general devices (from servers to embedded devices). IPFC was thought out
from the beginning with security in mind. IPFC features log collection for
different security "agents", dynamic log correlation possibilities and
easy extensibility due to the generic database and XML message formats
used.

A major part of the design framework has changed. In the next few weeks, you will see more documentation, code & example of usage released on this site. Thanks

Check CVS tree for more information

We have imported the initial CVS tree.
So now, we have a synced source tree to work with other people.

Initian sourceforge setup and announcement.
More to come...